Inside the rise of the digital parasite
Are ransomware and encryption still the defining signs of modern cyberattacks, or has the industry become so focused on the noise that it has missed the more dangerous changes happening quietly around it? According to Picus Labs’ new Red Report 2026, which analyzed more than 1.1 million malicious files and mapped 15.5 million hostile acts […]
ZAST.AI raises $6M in Pre-A to scale AI-powered code security with “zero false positives”
hacker newsFebruary 10, 2026Application security/artificial intelligence Seattle, USA, January 5, 2026 — ZAST.AI announces the completion of a $6 million Pre-A funding round. The investment comes from well-known investment firm Hillhouse Capital and brings ZAST.AI’s total funding to nearly $10 million. This marks recognition from major capital markets for a new solution that ends the […]
Warlock ransomware infiltrates SmarterTools through unpatched SmarterMail servers
Last week, SmarterTools confirmed that the Warlock (aka Storm-2603) ransomware group exploited unpatched SmarterMail instances to infiltrate networks. Derek Curtis, the company’s chief commercial officer, said the incident occurred on January 29, 2026, when an email server that had not been updated to the latest version was compromised. “Prior to the breach, we had approximately […]
Dutch authorities confirm Ivanti zero-day exploit exposed employee contact data
Ravi LakshmananFebruary 10, 2026Data breach/vulnerabilities The Dutch Data Protection Authority (AP) and the Council of Justice in the Netherlands have acknowledged that the two agencies (Rvdr) have revealed that their systems were affected by a cyberattack that exploited a recently disclosed security flaw in Ivanti Endpoint Manager Mobile (EPMM), according to a notice sent to […]
Fortinet patches critical SQLi flaw that allows unauthenticated code execution
Ravi LakshmananFebruary 10, 2026Vulnerability/Network Security Fortinet has released a security update to address a critical flaw affecting FortiClientEMS that could lead to the execution of arbitrary code on susceptible systems. This vulnerability is tracked as CVE-2026-21643 and has a CVSS rating of 9.1 out of a maximum of 10.0. Improper Disablement Vulnerability of Special Elements […]
China-linked UNC3886 targets Singapore’s telecom sector with cyber espionage
Ravi LakshmananFebruary 9, 2026Cyber espionage/virtualization Singapore’s Cyber Security Agency (CSA) revealed on Monday that a China-aligned cyber espionage group known as UNC3886 had targeted Singapore’s telecommunications sector. “UNC3886 has launched a deliberate, targeted and well-planned campaign against Singapore’s telecommunications sector,” the CSA said. “Singapore’s four major telecommunications operators (‘telcos’) – M1, SIMBA Telecom, Singtel and […]
SolarWinds Web Help Desk exploited by RCE in multi-stage attack against public servers
Ravi LakshmananFebruary 9, 2026Vulnerabilities / Endpoint Security Microsoft disclosed that it observed a multi-stage intrusion in which an attacker exploited an Internet-exposed SolarWinds Web Help Desk (WHD) instance to gain initial access and move laterally across an organization’s network to other high-value assets. That said, the Microsoft Defender Security Research Team is wondering whether this […]
AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More
Ravie LakshmananFeb 09, 2026Hacking News / Cybersecurity Cyber threats are no longer coming from just malware or exploits. They’re showing up inside the tools, platforms, and ecosystems organizations use every day. As companies connect AI, cloud apps, developer tools, and communication systems, attackers are following those same paths. A clear pattern this week: attackers are […]
How top CISOs can overcome burnout and speed up MTTR without hiring more people
Why do SOC teams continue to burn out and miss SLAs despite spending millions on security tools? Routine triage piles up, senior experts are dragged into basic verification, MTTR rises, and stealth threats still have room to slip through. Top CISOs have found that this solution provides teams with faster and clearer evidence of action […]
Bloody Wolf uses NetSupport RAT in spear phishing campaign to target Russian Uzbekistan
Ravi LakshmananFebruary 9, 2026Threat Intelligence/Cyber Espionage The threat actor known as Bloody Wolf is said to be involved in a campaign targeting Uzbekistan and Russia, infecting systems with a remote access Trojan known as NetSupport RAT. Cybersecurity vendor Kaspersky is tracking this activity under the name “Stan Goulds.” This threat actor is known to have […]